You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Serge E. Hallyn 8409cca705 userns: allow ptrace from non-init user namespaces ... ptrace is allowed to tasks in the same user namespace according to the usual rules (i.e. the same rules as for two tasks in the init user namespace). ptrace is also allowed to a user namespace to which the current task the has CAP_SYS_PTRACE capability. Changelog: Dec 31: Address feedback by Eric: . Correct ptrace uid check . Rename may_ptrace_ns to ptrace_capable . Also fix the cap_ptrace checks. Jan 1: Use const cred struct Jan 11: use task_ns_capable() in place of ptrace_capable(). Feb 23: same_or_ancestore_user_ns() was not an appropriate check to constrain cap_issubset. Rather, cap_issubset() only is meaningful when both capsets are in the same user_ns. Signed-off-by: Serge E. Hallyn <serge.hallyn@canonical.com> Cc: "Eric W. Biederman" <ebiederm@xmission.com> Acked-by: Daniel Lezcano <daniel.lezcano@free.fr> Acked-by: David Howells <dhowells@redhat.com> Cc: James Morris <jmorris@namei.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		14 years ago
..
apparmor	userns: security: make capabilities relative to the user namespace	14 years ago
integrity/ima	ima: remove unnecessary call to ima_must_measure	14 years ago
keys	KEYS: Add an iovec version of KEYCTL_INSTANTIATE	14 years ago
selinux	userns: security: make capabilities relative to the user namespace	14 years ago
smack	Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into next	14 years ago
tomoyo	TOMOYO: Fix memory leak upon file open.	14 years ago
Kconfig	keys: add new key-type encrypted	14 years ago
Makefile	…
capability.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6	14 years ago
commoncap.c	userns: allow ptrace from non-init user namespaces	14 years ago
device_cgroup.c	…
inode.c	convert get_sb_single() users	14 years ago
lsm_audit.c	…
min_addr.c	…
security.c	userns: security: make capabilities relative to the user namespace	14 years ago